Privacy Policy

Effective June 20, 2026

Momentum SCM LLC (“Momentum,” “we,” “us”) is a supply-chain and third-party-logistics (3PL) operations and billing platform. This Privacy Policy explains what information we collect, how we use it, and the choices available to you. It applies to the Momentum web application at momentumscm.io and related services (the “Service”).

1. Who the Service is for

Momentum is a business-to-business application used by 3PL operators and their clients to manage fulfillment, inventory, and billing. We do not direct the Service to children and do not knowingly collect information from anyone under 16.

2. Information we collect

Account information — names, email addresses, role, and authentication data for users we invite to the Service.
Operational data — orders, shipments, inventory, supplies, receiving, storage, and related logistics records used to run fulfillment and produce invoices.
Billing data — rate cards, invoices, credits, and payment status used to bill clients and track accounts receivable.
Data from connected systems — when an authorized administrator connects a third-party service (see §4), we access data from that service to operate the corresponding feature.
Usage and diagnostic data — log and error data used to keep the Service secure and reliable.

3. How we use information

Provide, operate, secure, and improve the Service.
Calculate charges and generate and deliver invoices.
Synchronize records with connected systems you authorize.
Communicate with users (invitations, notifications, support, transactional email).
Detect, prevent, and respond to fraud, abuse, and security incidents.
Comply with legal obligations.

We do not sell personal information, and we do not use it for third-party advertising.

4. Connected services and sub-processors

We use a limited set of vendors to provide the Service. They process data only to perform services for us:

Intuit QuickBooks Online — when an administrator authorizes a connection, we access QuickBooks customers, items, accounts, and invoice data via Intuit’s OAuth API to create and reconcile invoices for that company. Each connection is scoped to the specific QuickBooks company that authorized it. We access this data solely to provide billing features within the Service; we do not sell it or use it for any unrelated purpose, and an administrator may disconnect at any time, which revokes our access.
ShipHero — warehouse management system; source of order, shipment, and inventory data.
Supabase — database, authentication, and file storage hosting.
Vercel — application hosting.
Resend — transactional email delivery.
Sentry — error and performance monitoring.

5. How information is shared

We share information only: (a) with the sub-processors above to operate the Service; (b) between a 3PL operator and its own clients as inherent to the Service (for example, a client sees invoices and shipment data scoped to that client); (c) when required by law or to protect rights, safety, and security; and (d) in connection with a business transfer, subject to this Policy.

6. Data retention

We retain information for as long as needed to provide the Service, meet legal, accounting, and reporting obligations, and resolve disputes. Data pulled from a connected service is removed or rendered inaccessible when the connection is revoked and retention requirements no longer apply.

7. Security

We use industry-standard safeguards including encryption in transit, scoped access controls, row-level authorization, and least-privilege service credentials. No method of transmission or storage is completely secure, but we work to protect information consistent with the sensitivity of the data we handle.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, export, or delete personal information. Most account data can be managed within the Service; for other requests, contact us at legal@momentumscm.io. Administrators can disconnect any third-party integration at any time.

9. International users

The Service is operated in the United States; by using it you understand information is processed there.

10. Changes

We may update this Policy from time to time; the “Effective” date above reflects the latest version.

11. Contact

Questions about this Policy or our data practices: legal@momentumscm.io.